def get_or_post(self, request, method): errors = [] # List authorities already in the Registry in order to avoid duplicates # Using cache manifold-tables to get the list of authorities faster authorities_query = Query.get("authority").select("name", "authority_hrn") authorities = execute_admin_query(request, authorities_query) if authorities is not None: authorities = sorted(authorities) root_authorities = sorted([a for a in authorities if "." not in a["authority_hrn"]]) page = Page(request) page.add_js_files(["js/jquery.validate.js", "js/join.js"]) page.add_css_files(["css/onelab.css", "css/registration.css"]) page.add_css_files(["http://code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css"]) if method == "POST": # xxx tocheck - if authorities is empty, it's no use anyway # (users won't be able to validate the form anyway) # List local users in Manifold DB in order ot avoid duplicates user_query = Query().get("local:user").select("user_id", "email") list_users = execute_admin_query(self.request, user_query) reg_root_authority_hrn = request.POST.get("root_authority_hrn", "").lower() reg_site_name = request.POST.get("site_name", "") reg_site_authority = request.POST.get("site_authority", "").lower() reg_site_abbreviated_name = request.POST.get("site_abbreviated_name", "") reg_site_url = request.POST.get("site_url", "") reg_site_latitude = request.POST.get("site_latitude", "") reg_site_longitude = request.POST.get("site_longitude", "") reg_fname = request.POST.get("pi_first_name", "") reg_lname = request.POST.get("pi_last_name", "") reg_auth = reg_root_authority_hrn + "." + reg_site_authority reg_email = request.POST.get("pi_email", "").lower() reg_phone = request.POST.get("pi_phone", "") # prepare user_hrn split_email = reg_email.split("@")[0] split_email = split_email.replace(".", "_") user_hrn = reg_auth + "." + split_email + str(randint(1, 1000000)) UserModel = get_user_model() reg_address_line1 = request.POST.get("address_line1", "") reg_address_line2 = request.POST.get("address_line2", "") reg_address_line3 = request.POST.get("address_line3", "") reg_address_city = request.POST.get("address_city", "") reg_address_postalcode = request.POST.get("address_postalcode", "") reg_address_state = request.POST.get("address_state", "") reg_address_country = request.POST.get("address_country", "") # POST value validation if re.search(r"^[\w+\s.@+-]+$", reg_fname) == None: errors.append("First Name may contain only letters, numbers, spaces and @/./+/-/_ characters.") if re.search(r"^[\w+\s.@+-]+$", reg_lname) == None: errors.append("Last Name may contain only letters, numbers, spaces and @/./+/-/_ characters.") if re.search(r"^\w+$", reg_site_authority) == None: errors.append("Site Authority may contain only letters or numbers.") # checking in django_db !! if PendingUser.objects.filter(email__iexact=reg_email): errors.append("Email is pending for validation. Please provide a new email address.") if PendingAuthority.objects.filter(site_authority__iexact=reg_auth): errors.append("This site is pending for validation.") if PendingAuthority.objects.filter(site_name__iexact=reg_site_name): errors.append("This site is pending for validation.") if UserModel._default_manager.filter(email__iexact=reg_email): errors.append("This email is not usable. Please contact the administrator or try with another email.") for user_detail in list_users: if user_detail["email"] == reg_email: errors.append("Email already registered in Manifold. Please provide a new email address.") # XXX TODO: Factorize with portal/accountview.py # if 'generate' in request.POST['question']: from Crypto.PublicKey import RSA private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps(public.exportKey(format="OpenSSH")) # Saving to DB account_config = ( '{"user_public_key":' + public_key + ', "user_private_key":' + private_key + ', "user_hrn":"' + user_hrn + '"}' ) auth_type = "managed" public_key = public_key.replace('"', "") if not errors: reg_password = request.POST["pi_password"] a = PendingAuthority( site_name=reg_site_name, site_authority=reg_root_authority_hrn + "." + reg_site_authority, site_abbreviated_name=reg_site_abbreviated_name, site_url=reg_site_url, site_latitude=reg_site_latitude, site_longitude=reg_site_longitude, address_line1=reg_address_line1, address_line2=reg_address_line2, address_line3=reg_address_line3, address_city=reg_address_city, address_postalcode=reg_address_postalcode, address_state=reg_address_state, address_country=reg_address_country, authority_hrn=reg_root_authority_hrn, ) a.save() reg_password = request.POST["pi_password"] b = PendingUser( first_name=reg_fname, last_name=reg_lname, authority_hrn=reg_auth, email=reg_email, password=reg_password, keypair=account_config, pi=reg_auth, ) b.save() # saves the user to django auth_user table [needed for password reset] user = User.objects.create_user(reg_email, reg_email, reg_password) # creating user to manifold local:user user_config = ( '{"firstname":"' + reg_fname + '", "lastname":"' + reg_lname + '", "authority":"' + reg_auth + '"}' ) user_params = {"email": reg_email, "password": reg_password, "config": user_config, "status": 1} manifold_add_user(request, user_params) # creating local:account in manifold user_id = user_detail["user_id"] + 1 # the user_id for the newly created user in local:user account_params = { "platform_id": 5, "user_id": user_id, "auth_type": auth_type, "config": account_config, } manifold_add_account(request, account_params) # Send email ctx = { "first_name": reg_fname, "last_name": reg_lname, "authority_hrn": reg_auth, "email": reg_email, "user_hrn": user_hrn, "public_key": public_key, } recipients = authority_get_pi_emails(request, reg_auth) # We don't need to send this email to user. # it's for the PI only # if ctx['cc_myself']: # recipients.append(ctx['email']) msg = render_to_string("user_request_email.txt", ctx) send_mail( "Onelab New Authority request for %s submitted" % reg_email, msg, "*****@*****.**", recipients ) return render(request, "user_register_complete.html") template_env = { "topmenu_items": topmenu_items_live("join", page), "errors": errors, "pi_first_name": request.POST.get("pi_first_name", ""), "pi_last_name": request.POST.get("pi_last_name", ""), "pi_email": request.POST.get("pi_email", ""), "pi_phone": request.POST.get("pi_phone", ""), "pi_password": request.POST.get("pi_password", ""), "site_name": request.POST.get("site_name", ""), "site_authority": request.POST.get("site_authority", "").lower(), "site_abbreviated_name": request.POST.get("site_abbreviated_name", ""), "site_url": request.POST.get("site_url", ""), "site_latitude": request.POST.get("site_latitude", ""), "site_longitude": request.POST.get("site_longitude", ""), "address_line1": request.POST.get("address_line1", ""), "address_line2": request.POST.get("address_line2", ""), "address_line3": request.POST.get("address_line3", ""), "address_city": request.POST.get("address_city", ""), "address_postalcode": request.POST.get("address_postalcode", ""), "address_state": request.POST.get("address_state", ""), "address_country": request.POST.get("address_country", ""), "root_authority_hrn": request.POST.get("root_authority_hrn", "").lower(), "root_authorities": root_authorities, "authorities": authorities, } template_env.update(page.prelude_env()) return render(request, "join_view.html", template_env)
def get_or_post (self, request, method): errors = [] # Using cache manifold-tables to get the list of authorities faster authorities_query = Query.get('authority').select('name', 'authority_hrn') #onelab_enabled_query = Query.get('local:platform').filter_by('platform', '==', 'ple').filter_by('disabled', '==', 'False') #onelab_enabled = not not execute_admin_query(request, onelab_enabled_query) #if onelab_enabled: if True: print "ONELAB ENABLED" #authorities_query = Query.get('ple:authority').select('name', 'authority_hrn').filter_by('authority_hrn', 'included', ['ple.inria', 'ple.upmc', 'ple.ibbtple', 'ple.nitos']) # Now using Cache else: print "FIREXP ENABLED" authorities = execute_admin_query(request, authorities_query) if authorities is not None: authorities = sorted(authorities) # xxx tocheck - if authorities is empty, it's no use anyway # (users won't be able to validate the form anyway) page = Page(request) page.add_js_files ( [ "js/jquery.validate.js", "js/my_account.register.js" ] ) page.add_css_files ( [ "css/onelab.css", "css/registration.css" ] ) page.add_css_files ( [ "http://code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css" ] ) print 'registration view, method',method user_query = Query().get('local:user').select('user_id','email') user_details = execute_admin_query(self.request, user_query) if method == 'POST': # We shall use a form here #get_email = PendingUser.objects.get(email) reg_fname = request.POST.get('firstname', '') reg_lname = request.POST.get('lastname', '') #reg_aff = request.POST.get('affiliation','') reg_auth = request.POST.get('authority_hrn', '') #reg_login = request.POST.get('login', '') reg_email = request.POST.get('email','').lower() #prepare user_hrn split_email = reg_email.split("@")[0] split_email = split_email.replace(".", "_") user_hrn = reg_auth + '.' + split_email+ str(randint(1,1000000)) UserModel = get_user_model() #POST value validation if (re.search(r'^[\w+\s.@+-]+$', reg_fname)==None): errors.append('First Name may contain only letters, numbers, spaces and @/./+/-/_ characters.') if (re.search(r'^[\w+\s.@+-]+$', reg_lname) == None): errors.append('Last Name may contain only letters, numbers, spaces and @/./+/-/_ characters.') # checking in django_db !! if PendingUser.objects.filter(email__iexact=reg_email): errors.append('Email is pending for validation. Please provide a new email address.') if UserModel._default_manager.filter(email__iexact=reg_email): errors.append('This email is not usable. Please contact the administrator or try with another email.') for user_detail in user_details: if user_detail['email']==reg_email: errors.append('Email already registered in Manifold. Please provide a new email address.') # XXX TODO: Factorize with portal/accountview.py if 'generate' in request.POST['question']: from Crypto.PublicKey import RSA private = RSA.generate(1024) private_key = json.dumps(private.exportKey()) public = private.publickey() public_key = json.dumps(public.exportKey(format='OpenSSH')) # # Generate public and private keys using SFA Library # from sfa.trust.certificate import Keypair # k = Keypair(create=True) # public_key = k.get_pubkey_string() # private_key = k.as_pem() # private_key = ''.join(private_key.split()) # public_key = "ssh-rsa " + public_key # Saving to DB account_config = '{"user_public_key":'+ public_key + ', "user_private_key":'+ private_key + ', "user_hrn":"'+ user_hrn + '"}' auth_type = 'managed' #keypair = re.sub("\r", "", keypair) #keypair = re.sub("\n", "\\n", keypair) #keypair = keypair.rstrip('\r\n') #keypair = ''.join(keypair.split()) #for sending email: removing existing double qoute public_key = public_key.replace('"', ''); else: up_file = request.FILES['user_public_key'] file_content = up_file.read() file_name = up_file.name file_extension = os.path.splitext(file_name)[1] allowed_extension = ['.pub','.txt'] if file_extension in allowed_extension and re.search(r'ssh-rsa',file_content): account_config = '{"user_public_key":"'+ file_content + '", "user_hrn":"'+ user_hrn +'"}' account_config = re.sub("\r", "", account_config) account_config = re.sub("\n", "\\n",account_config) account_config = ''.join(account_config.split()) auth_type = 'user' # for sending email public_key = file_content public_key = ''.join(public_key.split()) else: errors.append('Please upload a valid RSA public key.') #b = PendingUser(first_name=reg_fname, last_name=reg_lname, affiliation=reg_aff, # email=reg_email, password=request.POST['password'], keypair=keypair) #b.save() #saving to django db 'portal_pendinguser' table if not errors: b = PendingUser( first_name = reg_fname, last_name = reg_lname, #affiliation = reg_aff, authority_hrn = reg_auth, #login = reg_login, email = reg_email, password = request.POST['password'], keypair = account_config, pi = '', ) b.save() # saves the user to django auth_user table [needed for password reset] user = User.objects.create_user(reg_email, reg_email, request.POST['password']) #creating user to manifold local:user user_config = '{"firstname":"'+ reg_fname + '", "lastname":"'+ reg_lname + '", "authority":"'+ reg_auth + '"}' user_params = {'email': reg_email, 'password': request.POST['password'], 'config': user_config, 'status': 1} manifold_add_user(request,user_params) #creating local:account in manifold user_id = user_detail['user_id']+1 # the user_id for the newly created user in local:user account_params = {'platform_id': 5, 'user_id': user_id, 'auth_type': auth_type, 'config': account_config} manifold_add_account(request,account_params) # Send email ctx = { 'first_name' : reg_fname, 'last_name' : reg_lname, 'authority_hrn' : reg_auth, 'email' : reg_email, 'user_hrn' : user_hrn, 'public_key' : public_key, } recipients = authority_get_pi_emails(request,reg_auth) # backup email: if authority_get_pi_emails fails recipients.append('*****@*****.**') msg = render_to_string('user_request_email.txt', ctx) send_mail("Onelab New User request for %s submitted"%reg_email, msg, '*****@*****.**', recipients) return render(request, 'user_register_complete.html') template_env = { 'topmenu_items': topmenu_items_live('Register', page), 'errors': errors, 'firstname': request.POST.get('firstname', ''), 'lastname': request.POST.get('lastname', ''), #'affiliation': request.POST.get('affiliation', ''), 'authority_hrn': request.POST.get('authority_hrn', ''), 'email': request.POST.get('email', ''), 'password': request.POST.get('password', ''), 'authorities': authorities, } template_env.update(page.prelude_env ()) return render(request, 'registration_view.html',template_env)
def get_or_post (self, request, method): # Using cache manifold-tables to get the list of authorities faster authorities_query = Query.get('authority').select('name', 'authority_hrn') authorities = execute_admin_query(request, authorities_query) if authorities is not None: authorities = sorted(authorities) user_query = Query().get('local:user').select('email') user_email = execute_query(self.request, user_query) self.user_email = user_email[0].get('email') account_query = Query().get('local:account').select('user_id','platform_id','auth_type','config') account_details = execute_query(self.request, account_query) platform_query = Query().get('local:platform').select('platform_id','platform','gateway_type','disabled') platform_details = execute_query(self.request, platform_query) # getting user_hrn from local:account for account_detail in account_details: for platform_detail in platform_details: if platform_detail['platform_id'] == account_detail['platform_id']: # taking user_hrn only from myslice account # NOTE: we should later handle accounts filter_by auth_type= managed OR user if 'myslice' in platform_detail['platform']: account_config = json.loads(account_detail['config']) user_hrn = account_config.get('user_hrn','N/A') #user_query = Query().get('user').select('user_hrn').filter_by('user_hrn','==','$user_hrn') #user_hrn = execute_query(self.request, user_query) #self.user_hrn = user_hrn[0].get('user_hrn') page = Page(request) page.add_css_files ( [ "http://code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css" ] ) if method == 'POST': self.errors = [] # The form has been submitted slice_name = request.POST.get('slice_name', '') authority_hrn = request.POST.get('authority_hrn', '') number_of_nodes = request.POST.get('number_of_nodes', '') purpose = request.POST.get('purpose', '') email = self.user_email #user_hrn = user_hrn cc_myself = True if (authority_hrn is None or authority_hrn == ''): self.errors.append('Please, select an authority') # What kind of slice name is valid? if (slice_name is None or slice_name == ''): self.errors.append('Slice Name is mandatory') if (purpose is None or purpose == ''): self.errors.append('Purpose is mandatory') if not self.errors: ctx = { 'email': email, 'slice_name': slice_name, 'authority_hrn': authority_hrn, 'number_of_nodes': number_of_nodes, 'purpose': purpose, } s = PendingSlice( slice_name = slice_name, user_hrn = user_hrn, authority_hrn = authority_hrn, number_of_nodes = number_of_nodes, purpose = purpose ) s.save() # The recipients are the PI of the authority recipients = authority_get_pi_emails(request, authority_hrn) #if cc_myself: recipients.append('*****@*****.**') msg = render_to_string('slice-request-email.txt', ctx) #print "email, msg, email, recipients", email , msg, email, recipients send_mail("Onelab user %s requested a slice"%email , msg, email, recipients) return render(request,'slice-request-ack-view.html') # Redirect after POST template_env = { 'topmenu_items': topmenu_items_live('Request a slice', page), 'errors': self.errors, 'slice_name': request.POST.get('slice_name', ''), 'authority_hrn': request.POST.get('authority_hrn', ''), 'number_of_nodes': request.POST.get('number_of_nodes', ''), 'purpose': request.POST.get('purpose', ''), 'email': self.user_email, 'user_hrn': user_hrn, 'cc_myself': True, 'authorities': authorities, } template_env.update(page.prelude_env ()) return render(request, 'slicerequest_view.html',template_env)